{"id":7535,"date":"2022-04-22T14:40:21","date_gmt":"2022-04-22T21:40:21","guid":{"rendered":"https:\/\/www.xh86.me\/?p=7535"},"modified":"2022-04-22T14:40:21","modified_gmt":"2022-04-22T21:40:21","slug":"centos7%e4%b8%8b%e5%ae%89%e8%a3%85self-service-password%e5%ae%9e%e7%8e%b0ad%e5%9f%9f%e8%87%aa%e5%8a%a9%e4%bf%ae%e6%94%b9-%e9%87%8d%e7%bd%ae%e5%af%86%e7%a0%81","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=7535","title":{"rendered":"CentOS7\u4e0b\u5b89\u88c5self-service-password\u5b9e\u73b0AD\u57df\u81ea\u52a9\u4fee\u6539\/\u91cd\u7f6e\u5bc6\u7801"},"content":{"rendered":"
\n
\n

\u4e4b\u524d\u6709\u4ecb\u7ecdOpenLDAP\u5b89\u88c5\u4e0e\u914d\u7f6e:\u00a0CentOS7\u4e0b\u642d\u5efaOpenLDAP\u670d\u52a1\u5668<\/p>\n

\u8fd9\u91cc\u4e3a\u4e86\u6d4b\u8bd5\u65b9\u4fbf\uff0c\u6211\u76f4\u63a5\u4f7f\u7528\u7fa4\u6656LDAP Server\u670d\u52a1\u8fdb\u884c\u6d4b\u8bd5<\/p>\n

<\/div><\/p>\n

(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n

<\/div><\/p>\n

(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n

<\/div><\/p>\n

(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n

\u4e00\u3001\u914d\u7f6ewebtatic\u6e90\u5b89\u88c5php7.2\u73af\u5883<\/span><\/h2>\n
wget\u00a0https:\/\/mirror.webtatic.com\/yum\/el7\/webtatic-release.rpm\r\nyum\u00a0localinstall\u00a0webtatic-release.rpm\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
yum\u00a0-y\u00a0install\u00a0php72w\u00a0php72w-fpm\u00a0php72w-cli\u00a0php72w-common\u00a0php72w-gd\u00a0php72w-ldap\u00a0php72w-mbstring\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
vi\u00a0\/etc\/php.ini\r\n\u65f6\u533a\u914d\u7f6e\r\ndate.timezone\u00a0=\u00a0Asia\/Shanghai\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
systemctl\u00a0enable<\/span>\u00a0php-fpm.service\r\nsystemctl\u00a0start\u00a0php-fpm.service\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u4e8c\u3001\u5b89\u88c5 self-service-password<\/span><\/h2>\n
https:\/\/ltb-project.org\/download.html\r\n<\/code><\/pre>\n
\u4e0b\u8f7d\u5730\u5740<\/p>\n
https:\/\/ltb-project.org\/archives\/self-service-password-1.4.3-1.el7.noarch.rpm\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
yum\u00a0localinstall\u00a0self-service-password-1.4.3-1.el7.noarch.rpm\r\n<\/code><\/pre>\n
\u4f1a\u81ea\u52a8\u4f7f\u7528EPEL\u6e90\u5b89\u88c5php72w-Smarty<\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u4e09\u3001\u5b89\u88c5web\u4e2d\u95f4\u4ef6\u5e76\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<\/span><\/h2>\n
\u6211\u8fd9\u91cc\u4f7f\u7528nginx\uff0c\u5f53\u7136\u4f60\u4e5f\u53ef\u4ee5\u5b89\u88c5httpd<\/p>\n
yum\u00a0install\u00a0nginx\u00a0-y\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u4fee\u6539nginx\u914d\u7f6e\u6587\u4ef6<\/p>\n
vi\u00a0\/etc\/nginx\/nginx.conf\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
server\u6bb5\u4fee\u6539\u6210\u5982\u4e0b\u884c<\/p>\n
server\u00a0{\r\n\u00a0\u00a0listen\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a080;\r\n\u00a0\u00a0listen\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[::]:80;\r\n\u00a0\u00a0root\u00a0\/usr\/share\/self-service-password\/htdocs\/;\r\n\u00a0\u00a0index\u00a0index.php\u00a0index.html\u00a0index.htm;<\/code><\/pre>\n
#\u00a0Make\u00a0site\u00a0accessible\u00a0from\u00a0http:\/\/localhost\/<\/span>
\nserver_name\u00a0_;<\/p>\n
<\/code><\/pre>\n
#\u00a0Disable\u00a0sendfile\u00a0as\u00a0per\u00a0https:\/\/docs.vagrantup.com\/v2\/synced-folders\/virtualbox.html<\/span>
\nsendfile\u00a0off;<\/p>\n
<\/code><\/pre>\n
gzip\u00a0on;
\ngzip_comp_level\u00a06;
\ngzip_min_length\u00a01000;
\ngzip_types\u00a0text\/plain\u00a0text\/css\u00a0application\/json\u00a0application\/x-javascript\u00a0text\/xml\u00a0application\/xml\u00a0application\/xml+rss\u00a0text\/javascript\u00a0application\/javascript\u00a0text\/x-js;
\ngzip_vary\u00a0on;
\ngzip_proxied\u00a0any;
\ngzip_disable\u00a0“MSIE\u00a0[1-6].(?!.*SV1)”<\/span>;<\/p>\n
<\/code><\/pre>\n
#\u00a0Add\u00a0stdout\u00a0logging<\/span>
\nerror_log\u00a0\/var\/log<\/span>\/nginx\/ldapssp_error.log\u00a0warn;
\naccess_log\u00a0\/var\/log<\/span>\/nginx\/ldapssp_access.log\u00a0main;<\/p>\n
<\/code><\/pre>\n
#\u00a0pass\u00a0the\u00a0PHP\u00a0scripts\u00a0to\u00a0FastCGI\u00a0server\u00a0listening\u00a0on\u00a0socket<\/span>
\n#<\/span>
\nlocation\u00a0~\u00a0.php\u00a0{
\n#fastcgi_pass\u00a0unix:\/var\/run\/php-fpm.socket;<\/span>
\nfastcgi_pass\u00a0127.0.0.1:9000;
\nfastcgi_split_path_info\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0^(.+.php)(\/.+)$;
\nfastcgi_param\u00a0PATH_INFO\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0$fastcgi_path_info<\/span>;
\nfastcgi_param\u00a0PATH_TRANSLATED\u00a0$document_root<\/span>$fastcgi_path_info<\/span>;
\nfastcgi_param\u00a0SCRIPT_FILENAME\u00a0$document_root<\/span>$fastcgi_script_name<\/span>;
\nfastcgi_index\u00a0index.php;
\ntry_files\u00a0$fastcgi_script_name<\/span>\u00a0=404;
\nfastcgi_read_timeout\u00a0600;
\ninclude\u00a0fastcgi_params;
\n}<\/p>\n
<\/code><\/pre>\n
error_page\u00a0404\u00a0\/404.html;
\nlocation\u00a0=\u00a0\/404.html\u00a0{
\nroot\u00a0\/usr\/share\/nginx\/html;
\ninternal;
\n}<\/p>\n
<\/code><\/pre>\n
#\u00a0deny\u00a0access\u00a0to\u00a0.\u00a0files,\u00a0for\u00a0security<\/span>
\n#<\/span>
\nlocation\u00a0~\u00a0\/.\u00a0{
\nlog_not_found\u00a0off;
\ndeny\u00a0all;
\n}<\/p>\n
<\/code><\/pre>\n
location\u00a0~\u00a0\/scripts\u00a0{
\nlog_not_found\u00a0off;
\ndeny\u00a0all;
\n}
\n}<\/p>\n
<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u00a0systemctl\u00a0start\u00a0nginx\r\n\u00a0systemctl\u00a0enable<\/span>\u00a0nginx\r\n\u00a0firewall-cmd\u00a0--permanent\u00a0--zone=public\u00a0--add-port=80\/tcp\r\n\u00a0firewall-cmd\u00a0--reload\r\n<\/code><\/pre>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u8fd9\u65f6\u6253\u5f00web\u754c\u9762\u4f1a\u63d0\u793a<\/p>\n
Token encryption requires a random string in keyphrase setting<\/span><\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u539f\u56e0\u4e0e\u89e3\u51b3\u529e\u6cd5\uff1a<\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u4e94\u3001\u4fee\u6539<\/span><\/h2>\n
\n
cd<\/span>\u00a0\/usr\/share\/self-service-password\/conf\/\u00a0<\/code><\/pre>\n
vim\u00a0config.inc.php<\/p>\n
<\/code><\/pre>\n<\/section>\n
\u6211\u8fd9\u91cc\u5df2\u7ecf\u4fee\u6539\u597d\u4e86\uff0c \u76f4\u63a5\u4e0a\u4f20\u5373\u53ef<\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
<\/div><\/p>\n
(\u56fe\u7247\u53ef\u70b9\u51fb\u653e\u5927\u67e5\u770b)<\/span><\/p>\n
\u53ef\u4ee5\u8054\u7cfb\u5fae\u4fe1yuanfan2012<\/span>\u7d22\u8981\u672c\u6587\u7684\u76f8\u5173\u5b89\u88c5\u5305\u4e0e\u914d\u7f6e\u6587\u4ef6<\/p>\n
\u516d\u3001AD\u57df\u5bc6\u7801\u91cd\u7f6e\u4e0e\u4fee\u6539\u529f\u80fd\u6d4b\u8bd5<\/span><\/h2>\n